SEARCHING FOR INFO≈ 3 h a day per worker · Coveo 2025·WORK ABOUT WORK58% of the time · Asana, Anatomy of Work 2023·ITALIAN FIRMS · AI USE16.4% (≥ 10 staff) · Istat 2025·AI PROJECTS · SMB vs LARGE8% vs 71% · PoliMi Observatory 2025·AI ACT ART. 50 · IN FORCE2 Aug 2026 · EU 2024/1689·GARANTE FINE · CAREGGI€80,000 · Provv. 474/2025·AI ACT ART. 50 · FINEup to €15M or 3% turnover · art. 99·ITALIAN AI MARKET 2025€1.8bn · +50% · PoliMi Observatory·SEARCHING FOR INFO≈ 3 h a day per worker · Coveo 2025·WORK ABOUT WORK58% of the time · Asana, Anatomy of Work 2023·ITALIAN FIRMS · AI USE16.4% (≥ 10 staff) · Istat 2025·AI PROJECTS · SMB vs LARGE8% vs 71% · PoliMi Observatory 2025·AI ACT ART. 50 · IN FORCE2 Aug 2026 · EU 2024/1689·GARANTE FINE · CAREGGI€80,000 · Provv. 474/2025·AI ACT ART. 50 · FINEup to €15M or 3% turnover · art. 99·ITALIAN AI MARKET 2025€1.8bn · +50% · PoliMi Observatory·SEARCHING FOR INFO≈ 3 h a day per worker · Coveo 2025·WORK ABOUT WORK58% of the time · Asana, Anatomy of Work 2023·ITALIAN FIRMS · AI USE16.4% (≥ 10 staff) · Istat 2025·AI PROJECTS · SMB vs LARGE8% vs 71% · PoliMi Observatory 2025·AI ACT ART. 50 · IN FORCE2 Aug 2026 · EU 2024/1689·GARANTE FINE · CAREGGI€80,000 · Provv. 474/2025·AI ACT ART. 50 · FINEup to €15M or 3% turnover · art. 99·ITALIAN AI MARKET 2025€1.8bn · +50% · PoliMi Observatory·
LemniaBUSINESS
IT·ENRequest a pilot
STRUCTURAL COMPARISON

Three families of AI for Italian SMBs. Only one is insurable.

M365 Copilot and ChatGPT Enterprise are general-purpose cloud LLMs. The Italian suites such as Zucchetti and TeamSystem have added AI as an optional module, often built on third-party models. Lemnia is the only deterministic, Italian-native engine running on the company's hardware. The comparison is sourced and every claim stays verifiable.

AT A GLANCE

9 structural dimensions × 5 vendors.

Cells use ✓ / ✕ / ◐ / ? for native, excluded, conditional and undisclosed. Every cell carrying a [n] points to a primary source listed at the bottom of the page.

Yes / nativeNo / excludedPartial / conditionalNot disclosed
CRITERION
Lemnia Business
M365 Copilot
ChatGPT Enterprise
Zucchetti AI
TeamSystem AI
Local query-time execution
Default. Engine on the company's hardware.
Cloud only. Flex Routing default-on outside EU (Apr 2026).[3]
Cloud only. EU inference for new Projects only.[7]
Follia ships local-mode option.[15]
Cloud only, on Azure Italy North.[27]
Customer data NOT used for training
Contractual no-training. Tenant data never leaves the box.
Foundation LLM not trained on tenant data.[1]
Enterprise/Business no-training default; DPA opt-in required.[8]
Not disclosed on product pages.[15]
Policy lists an opt-out right against AI training on personal data, which confirms the activity.[19]
Cite-or-refuse (refuses when source missing)
5-step pipeline. Hedging whitelist per pack. Refusal explicit.
Citations via Bing/Graph, but no refusal contract.[12]
Citations only with web search; >10% hallucination on enterprise docs.[12]
No documented cite-or-refuse policy.[15]
No documented cite-or-refuse policy.[18]
Italian-native (NER · NLU · operational fluency)
Trained on IT corpora (business + tax + medical). Never English-via-translation.
IT UI supported but answers fall back to English.[26]
Multilingual; INVALSI shows non-OpenAI models lead on IT.[25]
IT-first suite; AI features in IT.
IT-first suite; AI features in IT.
Iperammortamento 2026 eligible (Annex V)
Capital asset, locally installed. RGS criterion met.[22]
SaaS subscription excluded per DM 4 May 2026.[22]
SaaS subscription excluded.[23]
Possibly, if Follia delivered on-prem + interconnected.[22]
SaaS suite excluded per RGS rationale.[23]
GDPR Art. 30 register signed BLAKE3, exportable
Signed register per query. PDF/JSON-LD/CSV export.
DPIA template only; SMB compiles its own ROPA.[1]
DPA available; SMB must sign + maintain own ROPA.[8]
ZGDPR module sold separately. No native Art. 30 export.
Generic GDPR claims. No native Art. 30 export documented.[18]
Italian regulator history (Garante)
Engineered around Garante Provv. 474/2025 + Trib. Siracusa 338/2026.[24]
No Copilot-specific sanction yet; ongoing DSK scrutiny.[1]
Ban Mar 2023, €15M fine Dec 2024 (annulled Mar 2026 on proportionality).[11]
No public AI-specific Garante action; vendor scope.
No public AI-specific Garante action; vendor scope.
Per-niche pre-signed DPIA
Template DPIA per sector (manifattura, distribuzione, servizi, studi).
Customer responsibility; Microsoft DPA at processor level only.[1]
Customer responsibility under OpenAI DPA.[8]
Customer responsibility; ZGDPR upsell.
Customer responsibility.
Pricing transparency
Per-seat, published; one-time license T1/T2/T3 plus optional cloud-burst.
$18-30/user/month list price; requires M365 base.[6]
Business $20-25; Enterprise opaque, ~$60, 150-seat min.[6]
Contact-sales only on every AI module.[15]
Bundled into suite tiers; AI add-on not separately listed.[18]
M365 COPILOT

An EU-cloud subscription with a 2026 residency regression.

Microsoft 365 Copilot is a general-purpose copilot bolted onto the Microsoft Graph. It is sold per-seat at $18 (annual promo through Jun 2026) to $30/user/month, on top of a qualifying M365 base. It cites sources when the answer is grounded but does not refuse when grounding is missing, and Microsoft itself documents that the system "sometimes provides too much information — using any retrieved chunk whether relevant or not — which leads to a higher rate of hallucinations".

On 17 April 2026 Microsoft enabled Flex Routing by default (Message Center MC1269223): under peak load, Copilot inference can route outside the EU without admin consent for new tenants. The 4 November 2025 announcement of in-country Italian processing is opt-in only, and the Anthropic models added as a sub-processor on 7 January 2026 are explicitly out of scope of the EU Data Boundary. EchoLeak (CVE-2025-32711, CVSS 9.3, zero-click data exfiltration) and the January 2026 DLP-bypass incident on confidentiality-labelled emails are documented Copilot-specific security events.

For an Italian SMB the operational reality is as follows: deployer obligations under AI Act art. 50 fall on the company, the GDPR art. 30 register is the customer's own work, and NIS2 D.Lgs. 138/2024 obligations are unrelated to Copilot. Because recurring cloud subscription fees are operating expenses rather than depreciable capital assets, the subscription is excluded from the 2026 Hyper-amortisation 180% / 100% / 50% maxi-deduction.

CHATGPT ENTERPRISE / BUSINESS

A strong base model, with weak Italian-fiscal coverage and a Garante history.

OpenAI's enterprise tiers (Business at $20/user/month annual, 2-seat minimum; Enterprise opaque around $60 with 150-seat minimum) ship a no-training default on customer inputs and, since 16 January 2026, EU-region inference residency for new Projects. Existing workspaces cannot be migrated. ChatGPT Business does not receive inference residency, only at-rest storage.

On the linguistic side, ChatGPT is multilingual rather than Italian-native. Independent INVALSI benchmarks (CLiC-it / ACL 2024) place non-OpenAI Llama-class models at the top on Italian comprehension. Italian fiscal artifacts (the codice fiscale formula, the partita IVA MOD-11 checksum, the fattura elettronica XML schema 1.2.2, ATECO 2025, regime forfettario thresholds) have no native handling and are processed as generic text, unless an SMB builds a custom GPT.

The Garante history matters: the 30 March 2023 ban (Provv. 9870832) and the 20 December 2024 €15M fine (Comunicato 10085432) are on record. The Tribunale di Roma annulled the €15M sanction on 20 March 2026 on proportionality rather than on facts, and the substantive findings on training-without-legal-basis and transparency violations stand for DPIA framing. ChatGPT Enterprise as a supply-chain dependency triggers a NIS2 vendor risk assessment for any SMB with 50 employees or more, or €10M turnover or more, in the 18 critical sectors.

ZUCCHETTI AI

Italy's leading software house, with an opaque AI stack.

Zucchetti shipped Trinity AI (announced at the May 2025 "AI Love ERP" event), Follia (ZCS AI Platform with cloud and on-premise modes) and AI features in Ad Hoc Infinity, Ago Infinity, Bollicine Web and the HR suite. The catalog is real, while the architecture stays opaque. ZCS marketing says "vengono usati modelli locali, in modo che le informazioni processate dall'IA non passino attraverso provider esterni". The underlying LLM family is not publicly disclosed, and Il Sole 24 Ore reports Zucchetti is developing a proprietary LLM that can be installed locally.

Pricing is contact-sales on every AI module, with no published €/user/month anywhere on zucchetti.it or zcscloud.it. The cite-or-refuse contract is absent from the marketing, where "risultati più accurati" is the strongest claim, and no hallucination rate is disclosed. The ZGDPR product is sold separately as compliance software, and there is no native art. 30 register export from the AI modules.

On iperammortamento, Zucchetti does not publish a formal eligibility framing for its AI features. Follia on-prem mode with proper interconnection could in principle qualify under Annex V, while the SaaS modules are excluded per the standard RGS rule. Adoption data for the AI features specifically is not broken out, and the Polimi Osservatorio AI numbers (7% small / 15% medium / 59% large) are vendor-agnostic.

TEAMSYSTEM AI

Microsoft-Azure-backed, with a training-on-customer-data clause.

TeamSystem brands AI as the "AI Edition" of existing suites (Enterprise, Studio AI, Studio HR AI, HR AI, Studio Legal AI, Hospitality, PEC Manager, Manufacturing), with 8 launched in 2025 and 20 in the pipeline. The shipped features are real but confined: counterparty suggestion, IVA code proposal, foreign invoice bookkeeping, bank reconciliation and a fiscal scheduler. These automate bookkeeping-adjacent tasks rather than acting as a general copilot on full ERP state. The reported volume is 200,000 daily AI interactions, +37% QoQ.

The architecture is cloud and aligned to the Microsoft stack: TeamSystem joined the Ambizione Italia Cloud Region Partner Alliance in 2022 and runs Enterprise Cloud on Azure Milan. The specific AI engine, whether Azure OpenAI direct or Azure-hosted custom, is not publicly disclosed, but the €250M / 5-year AI investment announced in July 2024 follows that direction.

The substantive divergence sits in TeamSystem's own privacy-rights page. Under «Diritto di opposizione» the policy reads, verbatim: «Puoi opporti al trattamento, compresa la profilazione ovvero l'utilizzo dei dati personali per le attività di addestramento di Sistemi di Intelligenza Artificiale» ("You may object to processing, including profiling or use of personal data for AI System training activities"). The provision of an objection right presupposes that the activity exists by default. Under «Diritto di rettifica» the same page references «dati personali, anche quelli utilizzati per le attività di addestramento di Sistemi di Intelligenza Artificiale» ("personal data, including data used for AI System training activities"). This is a materially different posture from the no-training default that Copilot, ChatGPT Enterprise and Lemnia commit to. There is no documented cite-or-refuse policy, and the SaaS suite is excluded from iperammortamento.

SOURCES

Every claim above traces to a primary source.

Numbered references. Vendor documentation, EUR-Lex, Garante decisions, INVALSI/CLiC-it benchmark papers, Italian press of record. Last verified May 2026.

REFERENCES
  1. [1]Microsoft 365 Copilot — Privacy & data residency (Microsoft Learn)
  2. [2]Microsoft — In-country data processing for M365 Copilot (4 Nov 2025)
  3. [3]Flex Routing default-on (Message Center MC1269223, 17 Apr 2026) — changepilot.cloud
  4. [4]CVE-2025-32711 EchoLeak — zero-click prompt injection in M365 Copilot (CVSS 9.3)
  5. [5]Federprivacy — Copilot DLP bypass on confidential emails (Jan 2026)
  6. [6]Microsoft 365 Copilot pricing (official)
  7. [7]OpenAI — Data residency & inference residency (Help Center)
  8. [8]OpenAI — Enterprise privacy (no-training default)
  9. [9]Garante per la Privacy — Provv. 9870832 (30 Mar 2023, ban ChatGPT)
  10. [10]Garante per la Privacy — Comunicato 10085432 (20 Dic 2024, €15M fine OpenAI)
  11. [11]ANSA — Tribunale di Roma annulla sanzione €15M (20 mar 2026)
  12. [12]Vectara — Hallucination on enterprise long-document benchmark (Feb 2026)
  13. [13]SimpleQA Verified benchmark (arXiv 2509.07968)
  14. [14]EU AI Act — Articolo 50 (trasparenza, in vigore 2 ago 2026)
  15. [15]Zucchetti — Follia ZCS AI Platform (sito ufficiale)
  16. [16]Parole di Management — Zucchetti Trinity AI (mag 2025)
  17. [17]Il Sole 24 Ore — Zucchetti proprietary LLM in development
  18. [18]TeamSystem — Intelligenza Artificiale (hub ufficiale)
  19. [19]TeamSystem — Privacy Policy, sez. «Quali sono i tuoi diritti» (training su Sistemi di IA)
  20. [20]Industria Italiana — TeamSystem 20 AI Editions roadmap
  21. [21]Il Sole 24 Ore — TeamSystem invests €250M in AI
  22. [22]DM 4 maggio 2026 — Nuovo Iperammortamento (PMI.it)
  23. [23]Commercialista Telematico — Iperammortamento 2026 esclusione SaaS
  24. [24]Garante Provv. 474/2025 — caso Careggi €80.000 (uso IA generativa)
  25. [25]Disce aut Deficere — INVALSI benchmark sui LLM in italiano (arXiv 2406.17535)
  26. [26]Microsoft Q&A — Copilot risponde in inglese (forum italiano)
  27. [27]Microsoft — Ambizione Italia Cloud Region Partner Alliance (TeamSystem partnership)
  28. [28]Concentric AI — ChatGPT security risks 2026
NEXT STEP

AFTER THE COMPARISON

A verification on real data, not on a slide.

The matrix above reports what each vendor commits to in writing. The pilot shows what Lemnia does in 30 minutes on the customer dossier the company's team will open the next morning, with the same Italian, the same connectors and a signed register exportable on the spot.

FOUNDERS PROGRAMME · LIMITED PLACES

Lemnia running on the data of a real company.

A thirty-minute demonstration, calibrated to the company's sector. Lemnia composes the record of a real customer, cites the sources line by line and presents the signed register ready for the DPO.

Request a pilot→Download the technical dossier